Palo Alto Networks PSE-STRATA-ASSOCIATE Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-STRATA-ASSOCIATE Online Questions & Answers

• Question 1:

  Which Palo Alto Networks product offers a centrally managed firewall update process?

  A. SD_WAN
  B. Prisma SaaS
  C. Panorama
  D. WildFire
  C. Panorama

• Question 2:

  A firewall enabled as a decryption broker will take which of the following actions?

  A. forward clear text traffic to security chains for additional enforcement
  B. monitor the state of active connections to determine which network packets to allow through
  C. correlate a series of related threat events that indicate a likely compromised host on the network
  D. identify potential denial-of-service (DoS) attacks and take protective action
  C. correlate a series of related threat events that indicate a likely compromised host on the network

• Question 3:

  Which two of the following are benefits of the Palo AltoNetworks Zero Trust architecture? (Choose two.) Select 2 Correct Responses

  A. tighter access control
  B. increased detection of threats and infiltration
  C. more network segments
  D. cloud-based virtual private network (VPN)
  A. tighter access control
  B. increased detection of threats and infiltration

• Question 4:

  Which traffic will be blocked when application-default service is set on a Security policy?

  A. SSH traffic on TCP/22
  B. HTTPS traffic on TCP/443
  C. HTTP traffic on TCP/81
  D. DNS traffic on UDP/53
  C. HTTP traffic on TCP/81

• Question 5:

  Which three key functions are processed as part of the Palo Alto Networks single-pass architecture (SPA)? (Choose three.) Select 3 Correct Responses

  A. User-ID
  B. Content-ID
  C. Intruder-ID
  D. Device-ID
  E. Virus-ID
  A. User-ID
  B. Content-ID
  D. Device-ID

• Question 6:

  The ability of a Next-Generation Firewall (NGFW) to logically group physical and virtual interfaces and then control traffic based on that grouping is known aswhat?

  A. LLDP profiles
  B. security zones
  C. DHCP groups
  D. security profile groups
  B. security zones

• Question 7:

  To use App-ID effectively in Security policies, which three best practices should be followed? (Choose three.) Select 3 Correct Responses

  A. Use Expedition to migrate aport-based policy to PAN-OS.
  B. Whenever possible, enable App-ID override.
  C. Use phased transition to safely enable applications.
  D. Use Policy Optimizer to migrate to an application-based policy.
  E. After the application is specified in policy, set the 7service to "any".
  A. Use Expedition to migrate aport-based policy to PAN-OS.
  C. Use phased transition to safely enable applications.
  D. Use Policy Optimizer to migrate to an application-based policy.

• Question 8:

  What file is needed from a firewall to generate a Security Lifecycle Review (SLR) report when creating the SLR?

  A. tech support file
  B. Panorama plugin registration file
  C. stats dump file
  D. system process core file
  C. stats dump file

• Question 9:

  A customer interested in Panorama is concerned about managing multiple firewalls they are putting in place globally. Each location has its own IP addresses,zones, and VPN configurations. Which element of Panorama will assist the customer in pushing this unique configuration information to the individual firewalls?

  A. device profile
  B. GlobalProtect
  C. templates
  D. device groups
  C. templates

• Question 10:

  In which two of the following scenarios is personal data excluded fromprotection under the General Data Protection Regulation (GDPR)? Select 2 Correct Responses

  A. The data was automated as part of an information filing system.
  B. The data was generated in the course of a purely personal or household activity.
  C. The data will be used for the prevention of criminal offenses.
  D. The data is related to a person's economic or cultural identity.
  A. The data was automated as part of an information filing system.
  C. The data will be used for the prevention of criminal offenses.